StackRadar

CVE-2026-24515

Low

Advisory

Published 23 Jan 2026In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
2.9
base score, highest
EPSS
0.002
7th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,199
of 17,787 indexed, latest versions
Container images
1,164
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,199 of 17,787 indexed charts deploy, on 1,164 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+30 more2.1.0-4ubuntu1.4+esm11, 2.1.0-7ubuntu0.16.04.5+esm11, 2.2.5-3ubuntu0.9+esm3, 2.2.9-1ubuntu0.8+esm1+4 more969
expatapk2.5.0-r4, 2.6.2-r0, 2.6.3-r0, 2.6.4-r0+6 more2.7.4-r0195
OSV records
ALPINE-CVE-2026-24515CGA-7rqm-52vp-qcqqDEBIAN-CVE-2026-24515UBUNTU-CVE-2026-24515
Also known as
CGA-8crp-j9g8-89r5, USN-8022-1, USN-8022-2

Charts affected

1,199 by stars
ChartLatestAffected imagesRadar Score
csghubcsghubVerified publisher2.4.32 of 34See more

csghub csghub 2.4.3

2 of the 34 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
opencsghq/agenticflow:ee-v0.6-52f03fead54db
expat@2.5.0-1+deb12u2
no fix listed
opencsghq/kubectl:latestb6d87e1048c2
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

58,897
csgshipcsghubVerified publisher0.4.61 of 10See more

csgship csghub 0.4.6

1 of the 10 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
opencsghq/csgship-portal:v1.2.1865814dc87a1
expat@2.7.0-r0
2.7.4-r0

Open the chart page →

11,335
rtcsic-charts0.1.11 of 5See more

rt csic-charts 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
firefart/requesttracker:5.0.40d6249906d8c
expat@2.5.0-1
no fix listed

Open the chart page →

15,380
wazuhcsic-charts0.1.02 of 4See more

wazuh csic-charts 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
wazuh/wazuh-dashboard:4.4.11787550d2358
expat@2.2.9-1ubuntu0.6
2.2.9-1ubuntu0.8+esm1
wazuh/wazuh-manager:4.4.121994f40e0da
expat@2.2.9-1ubuntu0.6
2.2.9-1ubuntu0.8+esm1

Open the chart page →

13,852
cspconsolecspconsole1.3.112 of 5See more

cspconsole cspconsole 1.3.11

2 of the 5 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
cspconsole/config-provider:1.0.365524a26a6c23
expat@2.5.0-1+deb12u2
no fix listed
cspconsole/report-collector:1.0.15839750248193b
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

12,274
cypikcypik-app0.1.01 of 2See more

cypik cypik-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
expat@2.5.0-1
no fix listed

Open the chart page →

7,503
jupyterhubd4nVerified publisher3.3.71 of 7See more

jupyterhub d4n 3.3.7

1 of the 7 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
aristidetm/basic-notebook:3.6.5469dbc951224
expat@2.5.0-1
no fix listed

Open the chart page →

16,604
nifi-registryd4nVerified publisher1.0.01 of 2See more

nifi-registry d4n 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
apache/nifi-registry:1.26.07cdfd8deec92
expat@2.4.7-1ubuntu0.3
2.4.7-1ubuntu0.7

Open the chart page →

5,398
daejeon_2-3daejeon2-30.1.01 of 2See more

daejeon_2-3 daejeon2-3 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
clsen2024/daejeon_2-3:latest1156cd87c8fb
expat@2.6.2-r0
2.7.4-r0

Open the chart page →

1,141
pagesdalston-pages1.0.02 of 3See more

pages dalston-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.9+esm3

Open the chart page →

20,190
pagesdaman-dell-kuber1.0.02 of 3See more

pages daman-dell-kuber 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.9+esm3

Open the chart page →

20,190
damap-chartdamapVerified publisher0.3.01 of 5See more

damap-chart damap 0.3.0

1 of the 5 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
ghcr.io/damap-org/damap-frontend:5.0.1609f48af4efc
expat@2.7.1-2
2.8.2-1~deb13u1

Open the chart page →

13,936
redashdasmeta0.1.01 of 1See more

redash dasmeta 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
redash/redash:26.3.0c5c9148f5c38
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

5,062
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
expat@2.2.5-3
2.2.5-3ubuntu0.9+esm3

Open the chart page →

27,728
datacube-datadatacube-charts0.2.61 of 1See more

datacube-data datacube-charts 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.9+esm3

Open the chart page →

18,863
datacube-indexdatacube-charts0.4.41 of 2See more

datacube-index datacube-charts 0.4.4

1 of the 2 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
opendatacube/ows:latest668cbb41473c
expat@2.6.1-2ubuntu0.2
2.6.1-2ubuntu0.4

Open the chart page →

6,123
datacube-owsdatacube-charts0.20.11 of 1See more

datacube-ows datacube-charts 0.20.1

1 of the 1 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
opendatacube/ows:latest668cbb41473c
expat@2.6.1-2ubuntu0.2
2.6.1-2ubuntu0.4

Open the chart page →

5,974
datacube-processingdatacube-charts0.1.11 of 2See more

datacube-processing datacube-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
opendatacube/pipelines:wofs-1.225d810e8504b8
expat@2.2.5-3
2.2.5-3ubuntu0.9+esm3

Open the chart page →

22,405
datacube-wpsdatacube-charts0.9.01 of 1See more

datacube-wps datacube-charts 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
opendatacube/wps:latest80df355a660b
expat@2.4.7-1ubuntu0.6
2.4.7-1ubuntu0.7

Open the chart page →

6,172
restcubedatacube-charts0.2.91 of 1See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
opendatacube/restcube:latest91870111837c
expat@2.2.5-3
2.2.5-3ubuntu0.9+esm3

Open the chart page →

24,335
eg-edge-stackdatawire0.0.11 of 7See more

eg-edge-stack datawire 0.0.1

1 of the 7 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.9+esm3

Open the chart page →

10,666
pagesdavid-pages1.0.02 of 3See more

pages david-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.9+esm3

Open the chart page →

20,190
giphy-appdavidy-helm-charts-repository0.1.21 of 1See more

giphy-app davidy-helm-charts-repository 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
davidy/giphy-app:1.0.2-arm41b2355cc23a
expat@2.6.4-r0
2.7.4-r0

Open the chart page →

704
db-connection-testdb-connection-testVerified publisher0.1.01 of 1See more

db-connection-test db-connection-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
felipecs8/app-db-connection-test:v129e06c9c6385
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

10,090
pagesdebasish-pages1.0.02 of 3See more

pages debasish-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.9+esm3

Open the chart page →

20,190
intel-gpu-exporterdefault-ghVerified publisher0.1.01 of 1See more

intel-gpu-exporter default-gh 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
andrewgolikov55/intel-gpu-exporter:latestfcc001b61c0e
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.7

Open the chart page →

4,798
csi-driver-smbdeimosfr-charts1.20.31 of 5See more

csi-driver-smb deimosfr-charts 1.20.3

1 of the 5 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/smbplugin:v1.20.3dc7746bb081e
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

2,945
linkdingdeimosfr-charts1.0.31 of 1See more

linkding deimosfr-charts 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.35.00c5dddf0b37c
expat@2.5.0-1
no fix listed

Open the chart page →

6,075
deploy-elibrarydeploy-elibrary-helm0.1.01 of 1See more

deploy-elibrary deploy-elibrary-helm 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
psorab/elibrary:latest53b68896c4ce
expat@2.2.9-1ubuntu0.6
2.2.9-1ubuntu0.8+esm1

Open the chart page →

7,212
deploy-elibrarydeploy-elibrary-oo0.1.01 of 1See more

deploy-elibrary deploy-elibrary-oo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
jedi132000/nextapp:latestdc2a81e92f23
expat@2.2.9-1ubuntu0.4
2.2.9-1ubuntu0.8+esm1

Open the chart page →

8,106
deployhubdeployhubVerified publisher10.0.4155 of 11See more

deployhub deployhub 10.0.415

5 of the 11 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
quay.io/deployhub/ms-nginx:svccat-v11.0.815-g717581d2d3400664e8
expat@2.7.3-r0
2.7.4-r0
quay.io/ortelius/ms-compitem-crud:main-v10.0.1566-gf3f81597b7f49eec76
expat@2.7.3-r0
2.7.4-r0
quay.io/ortelius/ms-dep-pkg-r:main-v10.0.1705-g21b3dc8a4150e94a45
expat@2.7.3-r0
2.7.4-r0
quay.io/ortelius/ms-textfile-crud:main-v10.0.1635-g5076aaf5c4c8adfc82
expat@2.7.3-r0
2.7.4-r0
quay.io/ortelius/ms-validate-user:main-v10.0.1694-g98ed94b5054bd4e97a
expat@2.7.3-r0
2.7.4-r0

Open the chart page →

11,160
seafilederp3.2.01 of 1See more

seafile derp 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:10.0.170628f29c663
expat@2.2.9-1ubuntu0.6
2.2.9-1ubuntu0.8+esm1

Open the chart page →

14,856
clamav-apidevhatVerified publisher1.0.11 of 1See more

clamav-api devhat 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
ghcr.io/devhatro/clamav-api:1.0.2ff0cd9db78d3
expat@2.6.4-r0
2.7.4-r0

Open the chart page →

2,097
apachedevops0.1.01 of 4See more

apache devops 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
ghcr.io/codingducksrl/laravel:8.15be52524664c
expat@2.4.7-1
2.4.7-1ubuntu0.7

Open the chart page →

30,031
laraveldevops0.10.31 of 4See more

laravel devops 0.10.3

1 of the 4 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
ghcr.io/codingducksrl/laravel:8.15be52524664c
expat@2.4.7-1
2.4.7-1ubuntu0.7

Open the chart page →

29,033
ai-agentdevtron0.0.11 of 1See more

ai-agent devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

9,607
argocd-certificate-refreshdevtron0.10.81 of 1See more

argocd-certificate-refresh devtron 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.7

Open the chart page →

12,949
devtron-enterprisedevtron48.0.02 of 28See more

devtron-enterprise devtron 48.0.0

2 of the 28 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
expat@2.5.0-1
no fix listed
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

68,240
dgraphdevtron0.0.201 of 1See more

dgraph devtron 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1

Open the chart page →

11,909
ai-agentdevtron-labs0.0.11 of 1See more

ai-agent devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
expat@2.5.0-1+deb12u1
no fix listed

Open the chart page →

9,607
argocd-certificate-refreshdevtron-labs0.10.81 of 1See more

argocd-certificate-refresh devtron-labs 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.7

Open the chart page →

12,949
devtron-enterprisedevtron-labs48.0.02 of 28See more

devtron-enterprise devtron-labs 48.0.0

2 of the 28 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
expat@2.5.0-1
no fix listed
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
expat@2.5.0-1+deb12u2
no fix listed

Open the chart page →

68,240
devtron-operatordevtron-labs0.23.31 of 11See more

devtron-operator devtron-labs 0.23.3

1 of the 11 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
expat@2.5.0-1
no fix listed

Open the chart page →

32,902
dgraphdevtron-labs0.0.201 of 1See more

dgraph devtron-labs 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1

Open the chart page →

11,909
eoloplannerdfa-amm-eoloplannerVerified publisher0.1.02 of 7See more

eoloplanner dfa-amm-eoloplanner 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
library/rabbitmq:3-managemente582c0bc7766
expat@2.6.1-2ubuntu0.3
2.6.1-2ubuntu0.4
oscarsotosanchez/weatherservice:v1.0911ec961d10b
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.9+esm3

Open the chart page →

27,550
difydify1.0.02 of 4See more

dify dify 1.0.0

2 of the 4 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
langgenius/dify-api:1.0.0066035f93856
expat@2.5.0-1+deb12u1
no fix listed
langgenius/dify-sandbox:0.2.009b7e8705673
expat@2.5.0-1
no fix listed

Open the chart page →

19,224
pagesdipak1.0.02 of 3See more

pages dipak 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.9+esm3

Open the chart page →

20,190
bearhugmugsdjjudas21Verified publisher0.1.01 of 1See more

bearhugmugs djjudas21 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
djjudas21/bearhugmugs:0.1.14fa898a52d97
expat@2.6.4-r0
2.7.4-r0

Open the chart page →

704
domainmoddjjudas21Verified publisher1.0.01 of 1See more

domainmod djjudas21 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
domainmod/domainmod:4.23.04017bfe4c597
expat@2.5.0-1
no fix listed

Open the chart page →

7,141
photoprismdjjudas21Verified publisher99.99.991 of 1See more

photoprism djjudas21 99.99.99

1 of the 1 container images this version deploys carry CVE-2026-24515.

Container imageDigestPackageFixed in
photoprism/photoprism:240711-cefc6fd632ca74
expat@2.6.1-2build1
2.6.1-2ubuntu0.4

Open the chart page →

16,954

Container images carrying it

1,164 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
airbyte/manifest-server:7.23.73b3a670af168
expat@2.5.0-1+deb12u2
no fix listed
1
airbyte/pod-sweeper:1.5.198d2c39d512e
expat@2.5.0-1+deb12u1
no fix listed
1
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
1
akaunting/akaunting:3.0.1552811b36ec3a
expat@2.5.0-1
no fix listed
1
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
expat@2.7.2-r0
2.7.4-r0
1
aktosecurity/data-ingestion-service213aded7adc5
expat@2.6.1-2ubuntu0.3
2.6.1-2ubuntu0.4
1
allegroai/clearml:2.0.0-613713ae38f7daf
expat@2.5.0-1+deb12u1
no fix listed
1
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
expat@2.2.5-3ubuntu0.7
2.2.5-3ubuntu0.9+esm3
1
alpine/git:v2.49.1c0280cf95723
expat@2.7.3-r0
2.7.4-r0
1
alpine/helm105741fa6621
expat@2.6.2-r0
2.7.4-r0
1
alpine/helm:4.1.0905a068da431
expat@2.7.3-r0
2.7.4-r0
1
alpine/k8s:1.31.106dbe6f391eda
expat@2.7.1-r0
2.7.4-r0
1
alpine/k8s:1.31.137a319b15cfc9
expat@2.7.2-r0
2.7.4-r0
1
alpine/k8s:1.32.47e1e7d5b7a96
expat@2.7.0-r0
2.7.4-r0
1
alpine/k8s:1.31.49c4976d47656
expat@2.6.4-r0
2.7.4-r0
1
alpine/k8s:1.30.2cd560fce90f7
expat@2.6.2-r0
2.7.4-r0
1
alpine/k8s:1.28.13e5c0b053fed7
expat@2.6.2-r0
2.7.4-r0
1
alpine/k8s:1.32.3eec354133193
expat@2.6.4-r0
2.7.4-r0
1
andrewgaul/s3proxy:sha-85b0f987dc1d34174a5
expat@2.6.1-2ubuntu0.1
2.6.1-2ubuntu0.4
1
andrewgolikov55/intel-gpu-exporter:latestfcc001b61c0e
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.7
1
andrewmackrodt/firefox-x11:142.0.1-r133f9080470c9
expat@2.4.7-1ubuntu0.6
2.4.7-1ubuntu0.7
1
anguda/ant-media:2.5c435285fc241
expat@2.2.9-1ubuntu0.6
2.2.9-1ubuntu0.8+esm1
1
antrea/antrea-ui-frontend:v0.8.0ee9686bcefb8
expat@2.7.1-2
2.8.2-1~deb13u1
1
anujdatar/cups:25.07.01685df04a643b
expat@2.5.0-1+deb12u1
no fix listed
1
apache/activemq-artemis:2.44.00305c26f19ed
expat@2.6.1-2ubuntu0.3
2.6.1-2ubuntu0.4
1
apache/activemq-artemis:2.37.0bae523439ee3
expat@2.6.1-2build1
2.6.1-2ubuntu0.4
1
apache/airflow:2.8.4-python3.964e58748b6b9
expat@2.5.0-1
no fix listed
1
apache/airflow:2.10.2-python3.9ce90bdc3d2af
expat@2.5.0-1+deb12u1
no fix listed
1
apache/airflow:2.8.1e5560ad0b86e
expat@2.5.0-1
no fix listed
1
apache/druid:29.0.10cef139b6bf1
expat@2.5.0-1
no fix listed
1
apache/gravitino-iceberg-rest:1.3.080136ae753ee
expat@2.4.7-1ubuntu0.6
2.4.7-1ubuntu0.7
1
apache/hertzbeat:1.8.075d48a62748f
expat@2.6.1-2ubuntu0.3
2.6.1-2ubuntu0.4
1
apache/hertzbeat-collector:1.8.0a2bab1be574c
expat@2.6.1-2ubuntu0.3
2.6.1-2ubuntu0.4
1
apache/iotdb:0.13.3-nodeafa47bf1692a
expat@2.2.9-1ubuntu0.4
2.2.9-1ubuntu0.8+esm1
1
apache/kafka:4.1.0bff074a5d005
expat@2.7.1-r0
2.7.4-r0
1
apache/kafka:3.9.0fbc7d7c428e3
expat@2.6.3-r0
2.7.4-r0
1
apache/nifi-registry:1.27.063b8e3e40742
expat@2.4.7-1ubuntu0.3
2.4.7-1ubuntu0.7
1
apachepulsar/pulsar:3.1.016f9fdab3fa6
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.7
1
apachepulsar/pulsar:2.10.03b262ab7a7d9
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
1
apachepulsar/pulsar:3.0.79c9947de139d
expat@2.4.7-1ubuntu0.4
2.4.7-1ubuntu0.7
1
apachepulsar/pulsar:2.9.0d056c89b7131
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
1
apachepulsar/pulsar:2.8.2d538416d5afe
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
1
apache/ranger:2.7.076c176e8a0e4
expat@2.4.7-1ubuntu0.6
2.4.7-1ubuntu0.7
1
apache/rocketmq:5.3.0434d8398f996
expat@2.6.1-2build1
2.6.1-2ubuntu0.4
1
apache/rocketmq-exporter:0.0.2c8fb51195444
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.7
1
apache/skywalking-oap-server:9.2.0133d35d2c263
expat@2.4.7-1
2.4.7-1ubuntu0.7
1
apache/skywalking-oap-server:8.9.1b4ec8c18d079
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
1
apache/skywalking-ui:9.2.0295f1dc87d98
expat@2.4.7-1
2.4.7-1ubuntu0.7
1
apache/skywalking-ui:8.9.180530f0308a5
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
1
apache/superset:4.0.1ab9467fd712c
expat@2.5.0-1
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.